Funambol Cloud Server Padding Oracle Attack Vulnerability
Vulnerability
A Padding Oracle Attack vulnerability has been identified in Funambol Cloud Server version 30.0.0.20. This vulnerability allows an attacker to decrypt and encrypt parameters used by the application to create 'self-signed' access URLs, exploiting weak encryption practices.
Impact
Exploitation of this vulnerability allows for a Padding Oracle Attack, where an attacker can manipulate and decrypt encrypted data, potentially leading to unauthorized access or modification of information.
Remediation
Users can upgrade to Funambol version 31.0.0.0 to address this vulnerability.
Added: Jan 28, 2026, 11:22 AM
Updated: Jan 28, 2026, 11:22 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
6.6remediation
0.0relevance
2.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.